Ask a Question

Alert ID : GN310518184741

Last Modified : 06/04/2018

DigiCert Root Compatibility

Description

DigiCert Root Compatibility

DigiCert SSL Certificates are issued under one of the oldest and most widely supported roots in the industry. DigiCert roots are trusted by virtually every browser in use today, as well as dozens of smart phones and handheld computing devices.

As one of the largest certificate providers in the world, certificates issued by DigiCert are trusted by all popular browsers, mail clients, and operating systems.

Root CA

Signature Algorithm

Serial number

DigiCert Global Root CA

SHA1withRSA

08 3b e0 56 90 42 46 b1 a1 75 6a c9 59 91 c7 4a

DigiCert Global Root G2

SHA256withRSA

03 3a f1 e6 a7 11 a9 a0 bb 28 64 b1 1d 09 fa e5

DigiCert Global Root G3

SHA384withECDSA

05 55 56 bc f2 5e a4 35 35 c3 a4 0f d5 ab 45 72

DigiCert High Assurance EV Root CA

SHA1withRSA

02 ac 5c 26 6a 0b 40 9b 8f 0b 79 f2 ae 46 25 77

Baltimore CyberTrust Root

SHA1withRSA

02 00 00 b9

VeriSign Class 3 Public Primary Certification Authority – G5

SHA1withRSA

18 da d1 9e 26 7d e8 bb 4a 21 58 cd cc 6b 3b 4a

 

Recommended certificate chain

Choose the appropriate certificate chain based on your client requirements.

Client support requirements

OV hierarchy

EV hierarchy

Modern browsers and smart phones

Mixed SHA256

Mixed SHA256

Older browsers, smart phones, and feature phones including old versions

Mixed SHA256 with a cross root under Baltimore Root

Mixed SHA256 with a cross root under Baltimore Root

Java

Mixed SHA256 with a cross root under Baltimore Root

Mixed SHA256 with a cross root under Baltimore Root

Non-browser with VeriSign G5 root only

Full SHA256 with a cross root under VeriSign G5 Root

Full SHA256 with a cross root under VeriSign G5 Root

Non-browser with VeriSign G5 root pinning

Full SHA256 with a cross root under VeriSign G5 Root

Full SHA256 with a cross root under VeriSign G5 Root

 

Root support in common browsers and operating systems

Windows

Root CA

Windows

DigiCert Global Root CA

Windows XP SP3 or higher

DigiCert Global Root G2

Windows XP SP3 or higher

DigiCert Global Root G3

Windows XP SP3 or higher

DigiCert High Assurance EV Root CA

Windows XP SP3 or higher

Baltimore CyberTrust Root

Windows XP SP3 or higher

VeriSign Class 3 Public Primary Certification Authority – G5

Windows XP SP3 or higher

 

Firefox

Reference: https://ccadb-public.secure.force.com/mozilla/IncludedCACertificateReport

Root CA

Firefox 1

Firefox 2

Firefox 3.0.2

Firefox 32

DigiCert Global Root CA

N/A

Available

Available

Available

DigiCert Global Root G2

N/A

N/A

N/A

Available

DigiCert Global Root G3

N/A

N/A

N/A

Available

DigiCert High Assurance EV Root CA

N/A

Available

Available

Available

Baltimore CyberTrust Root

Available

Available

Available

 

VeriSign Class 3 Public Primary Certification Authority – G5

N/A

N/A

Available

Available

 

Apple

Reference:
iOS 5 and 6: https://support.apple.com/en-us/HT201388

iOS 7: https://support.apple.com/en-us/HT203065

iOS 8: https://support.apple.com/en-us/HT205214

Root CA

iOS 5 and 6

iOS 7

iOS 8

DigiCert Global Root CA

Available

Available

Available

DigiCert Global Root G2

N/A

Available

Available

DigiCert Global Root G3

N/A

Available

Available

DigiCert High Assurance EV Root CA

Available

Available

Available

Baltimore CyberTrust Root

Available

Available

Available

VeriSign Class 3 Public Primary Certification Authority – G5

Available

Available

Available

 

Reference: https://support.apple.com/en-us/HT203120

Root CA

OS Leopard

OS X Mavericks

OS X Yosemite

DigiCert Global Root CA

Available

Available

Available

DigiCert Global Root G2

N/A

Available

Available

DigiCert Global Root G3

N/A

Available

Available

DigiCert High Assurance EV Root CA

Available

Available

Available

Baltimore CyberTrust Root

Available

Available

Available

VeriSign Class 3 Public Primary Certification Authority – G5

Available

Available

Available

 

Android

Root CA

SDK 1.5

SDK 2.2

SDK 2.3

SDK 5.x

DigiCert Global Root CA

Available

Available

Available

Available

DigiCert Global Root G2

N/A

N/A

N/A

Available

DigiCert Global Root G3

N/A

N/A

N/A

N/A

DigiCert High Assurance EV Root CA

Available

Available

Available

Available

Baltimore CyberTrust Root

N/A

N/A

Available

Available

VeriSign Class 3 Public Primary Certification Authority – G5

N/A

Available

Available

Available

 

Java

Root CA

JRE 1.4.1

JRE 1.4.2_17

JRE 1.6.0_11

JRE 1.6.0_19

JRE 1.8.0_101

DigiCert Global Root CA

N/A

Available

Available

Available

Available

DigiCert Global Root G2

N/A

N/A

N/A

N/A

Available

DigiCert Global Root G3

N/A

N/A

N/A

N/A

Available

DigiCert High Assurance EV Root CA

N/A

N/A

Available

Available

Available

Baltimore CyberTrust Root

Available

Available

Available

Available

Available

VeriSign Class 3 Public Primary Certification Authority – G5

N/A

N/A

N/A

Available

Available

 

Mixed SHA256 OV hierarchy

 

Mixed SHA256 OV hierarchy with a cross root under Baltimore Root


 

Mixed SHA256 EV hierarchy



Mixed SHA256 EV hierarchy with a cross root under Baltimore Root


 

Full SHA256 OV hierarchy with a cross root under VeriSign G5 Root


 

Full SHA256 EV hierarchy with a cross root under VeriSign G5 Root


 

SSL Intermediate and Root CA Certificates

https://knowledge.symantec.com/support/ssl-certificates-support/index?page=content&id=INFO4033


The need for a cross root under the Baltimore Root or VeriSign G5 Root is handled on a case-by-case basis. Contact Technical Support for help with determining if you have a dependency on one of these roots.